PatchSiren cyber security CVE debrief

CVE-2025-53415 Delta Electronics CVE debrief

CVE-2025-53415 is a Delta Electronics DTM Soft issue affecting versions up to 1.6.0.0. According to the CISA CSAF advisory, the flaw is a deserialization of untrusted data condition that may allow an attacker to extract information. CISA published the advisory on 2025-07-10 and assigned a High CVSS score of 7.8. The supplied data does not place this issue in CISA’s Known Exploited Vulnerabilities catalog.

Vendor: Delta Electronics
Product: DTM Soft
CVSS: HIGH 7.8
CISA KEV: Not listed in stored evidence
Original CVE published: 2025-07-10
Original CVE updated: 2025-07-10
Advisory published: 2025-07-10
Advisory updated: 2025-07-10

Who should care

Organizations using Delta Electronics DTM Soft, especially OT/ICS engineers, plant operators, and administrators of engineering or maintenance workstations running affected versions (<=1.6.0.0).

Technical summary

The advisory identifies a deserialization of untrusted data vulnerability in Delta DTM Soft. The affected product entry is Delta Electronics DTM Soft: <=1.6.0.0. The provided CVSS v3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access and user interaction are relevant to exploitation, with potentially significant confidentiality, integrity, and availability impact. The vendor’s remediation is to update to the latest version available from Delta’s Download Center and review the vendor advisory Delta-PCSA-2025-00009.

Defensive priority

High. The issue is rated High (7.8) and affects software used in industrial/engineering environments. Priority should be highest for systems that process untrusted files or receive data from less-trusted sources, and for endpoints used to open or manage DTM Soft project or BIN files.

Recommended defensive actions

Update Delta DTM Soft to the latest vendor-released version from Delta’s Download Center.
Review and apply guidance in Delta advisory Delta-PCSA-2025-00009.
Restrict use of affected systems to trusted users and trusted files only, especially where local file handling is involved.
Limit exposure of engineering workstations and related assets using network segmentation and least-privilege access.
Back up configuration and project data before updating, and verify compatibility after remediation.
Monitor affected endpoints for unusual file-processing behavior or unexpected application crashes.
Track CISA and vendor updates for any revised impact statements or remediation guidance.

Evidence notes

All core facts come from the supplied CISA CSAF advisory for ICSA-25-191-07 / CVE-2025-53415: vendor Delta Electronics, product DTM Soft, affected version <=1.6.0.0, issue type deserialization of untrusted data, and remediation to update to the latest version. The published and modified dates are both 2025-07-10T06:00:00Z in the supplied timeline. The supplied enrichment marks this as not present in CISA KEV.

Official resources

Public advisory disclosure date used here is 2025-07-10, matching the supplied CVE and source publication timestamps. The supplied data indicates the issue is not a KEV-listed vulnerability.